adding MODIFY MY PROFILE in the admin root page and some security on modifying roles